$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft File: iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft (raw, json) Hash identifier: VyiuVmV0Iw4pG8jeaVEAsnaAkqGPN7WBRjm4drBOvE4= Subject key identifier: AC:CD:75:30:6F:3B:C2:48:AC:8E:F9:C9:5F:C7:33:A5:A3:71:00:61 Authority key identifier: 89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45 Certificate issuer: /CN=89056fa9625b6c87404267c6dc219924ac160045 Certificate serial: 01A0D94CDEFAFBDE22CF9FFD2E1A59B049FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft Manifest number: 1AA1 Signing time: Fri 25 Sep 2026 16:01:28 +0000 Manifest this update: Fri 25 Sep 2026 16:01:28 +0000 Manifest next update: Sat 26 Sep 2026 16:01:28 +0000 Files and hashes: 1: 08tWIG0PWPMB6teHHPxQow1s2uE.roa (hash: TRz7F0l+NZVOM8RvaeEJy+Qjij2W704OcN/st69PivQ=) 2: 1-UqZU4lpdGQymEWntoGUKEtiDfs.roa (hash: uTnzw0q4V97naKhct/jjJQaHWdigAfbfM0kb6Q0iHPQ=) 3: 140kRQEj3h0GjQtPnM7mNhB0pd0.roa (hash: Glji+wdNx0lC1Qzp3pek3CS+AHdgtNRm2/n00pXzbAo=) 4: 1dV6pkuQdd-HC1y6xQt3McROiYw.roa (hash: gXtTDzPv9WQmg2U2/AVAIR2HMc660QfTKzCojb5m4Ek=) 5: DB2WtvMT6TxXIgEHXGIAtXj5H0k.roa (hash: Dnxb8mZ2R2y2UMXQPUm34dqJpzSVn8nnfGQsSFiCrQc=) 6: FUcbBOzjjlbY_wlRLYHqupvBQoY.roa (hash: cfKmdGrx3472puEg8Y3AGEJtcDQtTCxIr5rg73nD5Fs=) 7: GA5NIaob_i0eg5R554MtD65rkDU.roa (hash: bpwMu6JYsIFlQS/jF79o+wgM6JCrcfl8VddhfNU17mo=) 8: I1s63daDxmdSUkoW3y6FqwGC_kI.roa (hash: 2cA/q0JWCQ+iKL0Tgi1c5YHyZkG1aHs+6TYtD4toyos=) 9: IAog0mAhjeJoKpCE7InfTrDEICE.roa (hash: paRV5HrLIvsP8VMOY2Cmvjxq2/JHKdV5V7s5Hxdb4ho=) 10: N7EYzGEcYA36m-xSvdYRWYsCcUE.roa (hash: WxQmK8/jxnVfJLUqxdBcxCVr+Pgy+YeHJkLPADfkzds=) 11: P_ICJAuY1fS-sdbKO3ae7kjYH9k.roa (hash: USZSiJ9BppPlcXgUCCMjXHlF5EFhbbiWLDr45EjJQiw=) 12: R0aW1UlU2G9IJ0JSgRuhXpY0Qr0.roa (hash: 61Iq2Y9qBNlCXxjTubM5AW+momY69I+HgyILrPoypSI=) 13: RN6drM--dD_6tv6f7ZT4g-Tmx4M.roa (hash: 45pPotnyCUMx03gGTQCEe2Fo2L9SNyOnrMGfMN+GUgw=) 14: TjgQANrKozyjOw4w5hYOpjN8uMI.roa (hash: ZPk1Xebxi+DiSuX9N5KulEgI7Xg4MHf0W/5nIFTVTvE=) 15: iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl (hash: i5fyXLRfmWa64HhB2st8LZDVizJYiRs5JbsXZNdTKfQ=) 16: ism2bNCba5CRcXgOISoZjzrR_jk.roa (hash: dVX1PspVHvMWPysATRUgDChbCgGx47lGOpGb8yF+l7A=) 17: kHBXqwhaHY9YgoftEomJM-YmPQM.roa (hash: Fv2HJ19zHGdY+cirM1+n1J1pjKCaMFvflEkbxIMaw+U=) 18: lgdudiRubbn4kubyyDwuIWxdQas.roa (hash: Mto3E9aOm3/d28/F7shwzi6mJEuxr7zprdp5mund0Ik=) 19: qqOBoufK9Bv9fBzKEZO1Ybb2Xms.roa (hash: w+bQOMrvhdWjYo96qmwB8eS7ozAg8IZHWE6OTWarCag=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 26 Sep 2026 08:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d9:4c:de:fa:fb:de:22:cf:9f:fd:2e:1a:59:b0:49:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89056fa9625b6c87404267c6dc219924ac160045 Validity Not Before: Sep 25 16:01:28 2026 GMT Not After : Sep 26 16:01:28 2026 GMT Subject: CN=accd75306f3bc248ac8ef9c95fc733a5a3710061 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:e1:ab:6c:86:4d:bf:3f:5c:f2:3c:c7:d0:e8: 11:c3:85:0d:af:35:f5:9f:59:85:4e:46:de:3a:9b: 6e:0e:ff:4d:b6:48:78:fb:6f:fb:98:af:92:92:3f: 44:12:bc:f5:e9:c2:d2:df:dc:30:65:8b:9f:e1:22: 56:8c:8f:8b:d8:af:44:a5:5b:d4:de:9c:be:ba:a0: 86:ea:ce:2a:62:ed:70:c8:3c:09:7f:11:48:21:09: 23:3b:94:66:69:22:f0:60:44:84:87:fd:2f:4c:9c: c8:61:58:26:2d:ef:be:be:69:7c:d8:78:c6:e9:f4: 0b:81:29:12:22:60:8b:87:10:02:5a:9c:a3:3c:bc: 5b:22:72:6b:c1:ee:0f:3a:26:73:59:e1:dc:de:78: 00:bf:19:15:30:dc:82:00:8a:4c:62:60:e1:ce:e9: a0:dc:96:3b:f0:b3:3c:12:99:82:e1:5e:96:bb:86: ff:1d:d3:c2:97:e7:fa:92:a7:e1:5c:4f:77:f8:9d: 85:21:fe:a5:60:3d:e9:17:01:1b:03:39:ed:e4:1c: 91:88:30:c2:1a:17:7c:11:ae:33:da:96:f6:42:d6: 86:a0:5b:a1:f5:16:fb:31:2a:bc:3c:bc:e4:17:6d: d8:cd:ec:9a:b0:12:2f:64:e3:2b:0d:eb:1f:82:ec: df:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:CD:75:30:6F:3B:C2:48:AC:8E:F9:C9:5F:C7:33:A5:A3:71:00:61 X509v3 Authority Key Identifier: keyid:89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:ff:18:c4:9c:a7:d1:9e:66:b2:99:78:50:b1:a1:d3:07:fc: d1:5f:f4:69:54:ec:35:93:27:65:5c:05:55:f5:0c:98:3a:9e: 68:bb:c8:1a:67:22:ef:4e:27:12:e3:2b:66:06:ed:a9:eb:77: 6b:94:2f:ae:fb:ae:b9:df:51:19:78:65:9c:ee:bb:f7:22:fa: b9:0f:8e:5b:dd:2c:72:0f:d8:15:79:d2:01:b2:29:02:02:65: 9f:b7:bf:f9:94:f3:cb:68:8a:b7:ee:04:96:87:c7:6b:9c:a0: c7:eb:42:9a:6c:d2:af:41:e7:ef:a3:e8:25:ec:dc:79:15:b3: 8a:d1:be:1b:b7:6f:89:cd:af:2d:fe:29:3d:1f:b1:80:4d:94: df:a5:41:a2:32:2e:fb:8a:1c:2a:bc:21:e7:91:41:5f:f7:14: 21:19:7e:fa:2e:0e:41:5b:60:7b:3b:97:a8:4b:ba:d1:02:f7: 64:6b:66:f3:d7:d9:b2:95:44:fd:c3:c2:84:55:23:8d:2f:e3: ea:42:bc:54:a4:c7:d1:a3:45:10:ee:b1:00:17:22:61:fe:9f: de:bb:e7:d5:cb:45:0d:9f:bb:6e:16:5a:0a:96:3b:97:c0:57: 05:60:64:c0:1f:ef:7f:f1:03:3f:30:7d:72:3b:93:26:b8:70: 95:ee:fb:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDZTN76+94iz5/9LhpZsEn7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5MDU2ZmE5NjI1YjZjODc0MDQyNjdjNmRjMjE5OTI0YWMx NjAwNDUwHhcNMjYwOTI1MTYwMTI4WhcNMjYwOTI2MTYwMTI4WjAzMTEwLwYDVQQD EyhhY2NkNzUzMDZmM2JjMjQ4YWM4ZWY5Yzk1ZmM3MzNhNWEzNzEwMDYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+GrbIZNvz9c8jzH0OgRw4UNrzX1 n1mFTkbeOptuDv9Ntkh4+2/7mK+Skj9EErz16cLS39wwZYuf4SJWjI+L2K9EpVvU 3py+uqCG6s4qYu1wyDwJfxFIIQkjO5RmaSLwYESEh/0vTJzIYVgmLe++vml82HjG 6fQLgSkSImCLhxACWpyjPLxbInJrwe4POiZzWeHc3ngAvxkVMNyCAIpMYmDhzumg 3JY78LM8EpmC4V6Wu4b/HdPCl+f6kqfhXE93+J2FIf6lYD3pFwEbAznt5ByRiDDC Ghd8Ea4z2pb2QtaGoFuh9Rb7MSq8PLzkF23YzeyasBIvZOMrDesfguzfSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKzNdTBvO8JIrI75yV/HM6WjcQBhMB8GA1UdIwQY MBaAFIkFb6liW2yHQEJnxtwhmSSsFgBFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVFWdnFXSmJiSWRBUW1mRzNDR1pKS3dXQUVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi85OWFlMmYtMzljYy00M2YzLTk0MWQt NTE5MjAzNzMzNTNjLzEvaVFWdnFXSmJiSWRBUW1mRzNDR1pKS3dXQUVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi85OWFlMmYtMzljYy00M2YzLTk0MWQtNTE5MjAzNzMzNTNj LzEvaVFWdnFXSmJiSWRBUW1mRzNDR1pKS3dXQUVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANv8YxJyn 0Z5mspl4ULGh0wf80V/0aVTsNZMnZVwFVfUMmDqeaLvIGmci704nEuMrZgbtqet3 a5Qvrvuuud9RGXhlnO679yL6uQ+OW90scg/YFXnSAbIpAgJln7e/+ZTzy2iKt+4E lofHa5ygx+tCmmzSr0Hn76PoJezceRWzitG+G7dvic2vLf4pPR+xgE2U36VBojIu +4ocKrwh55FBX/cUIRl++i4OQVtgezuXqEu60QL3ZGtm89fZspVE/cPChFUjjS/j 6kK8VKTH0aNFEO6xABciYf6f3rvn1ctFDZ+7bhZaCpY7l8BXBWBkwB/vf/EDPzB9 cjuTJrhwle77xg== -----END CERTIFICATE-----Generated at Fri Sep 25 18:32:14 2026 by rpki-client